Give the inlineEditor widget a "raw value" option.

When we use the inline editor today, we take the contents of whichever element
is set, strip out any HTML formatting (like links that we may have inserted),
and then set that as the contents of the input widget. This is insufficient if
we want to do things like format things with markdown.

This change adds a couple options, hasRawValue and rawValue, to the widget. If
these are not set, everything works as before. If hasRawValue is true, the
contents of the rawValue option are used as the source text, rather than
calling .text() on the element and stripping it.

Testing done:
Used this with both raw-value and normal inline editors. Saw that my original
text was visible in the former, even after markdown changed things a lot, and
that the latter behaved as before.

Reviewed at https://reviews.reviewboard.org/r/4484/
For edit icons on inline editors, use CSS visibility instead of display.

We try to use CSS min-height on the labels for inline editors to keep them the
same height when the edit icon disappears, which works for the most part,
except many browsers think that the text baseline moves, which still makes the
text jump by a pixel or two.

This change alters our javascript to manipulate the visibility parameter of the
icon rather than just calling .show() and .hide(), which retains space for the
element on the page.

Testing done:
Opened and closed a bunch of inline editors and saw it be silky smooth.

Reviewed at https://reviews.reviewboard.org/r/4503/
Add an option to inlineEditor to prevent the height-matching behavior.

In cases where we're rendering rich text formats like markdown, it's often that
the height of the raw text won't match the height of the rendered element.
Rather than try to do this matching and have it make the editor (often
significantly) too big, always autosize it to fit the source text.

By default, this will animate to the target size, which makes it seem just as
smooth as before. It's only if people have disabled animation that it will seem
jumpy.

Testing done:
Tested opening and closing the editor for various blocks of text. In
particular, I tested the empty case (animate to minimum size) and the case
where I had a big block of markdown text that rendered significantly larger
than the text (due to images). In all cases, the text box was sized
appropriately for the contents within, and the transitions were smooth.

Reviewed at https://reviews.reviewboard.org/r/4498/
Include the edit icon width in the single-line width calculation

Without this, we bust our britches. Trivial fix.
Fix access permissions for WebAPIResource.get_list with parent objects.

The list resources didn't do any permissions checking other than the basic
logged-in/local-site checks. This meant that if you had a protected resource
with children, you could get lists of the children even without access to the
parents.

For a concrete example: in Review Board, review requests assigned to an "invite
only group" are visible only to members of that group. If you went to
/api/review-requests/<n>/, you'd get a permission denied, but if you went to
/api/review-requests/<n>/reviews/, you'd get a list of all the reviews on it.

Testing done: Added a unit test to the review board test suite for this case.
Reviewed at https://reviews.reviewboard.org/r/4557/
Require Django 1.4.8 at a minimum.

This release has some important security updates that affect all users
of the auth module.